Skip to main content
Skip table of contents

Pattern 7 : Authentication Failure

Classification

Rule Name

Rule Type

Classification

Common Event

Authentication Failure (Root)Sub RuleAuthentication FailureUser Logon Failure
Pattern 7 : Authentication FailureBase RuleAuthentication FailureAuthentication Failure Activity
Authentication FailureSub RuleAuthentication FailureAuthentication Failure Activity
Authentication FailureSub RuleAuthentication FailureUser Logon Failure
Authentication Failure (Root) From HostSub RuleAuthentication FailureUser Logon Failure

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

SAU2<severity>Number
Oct 26 10:08:29<dname>Text/String
N/A<process>Text/String
N/A<processid>Number
logname<account>N/A
rhost<sip>N/A
N/A<sname>Text/String
user<login>Text/String
N/A<tag1>Text/String
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.